Domain Risk Details Report

Use the Domain Risk Details report to understand why a referral domain was flagged for domain reputation risk in Event Risk. The report surfaces specific reputation triggers detected for a single domain. These triggers help you distinguish between dangerous signals, such as malware, from less severe concerns, like abnormal traffic.

You must enter a domain to run the report. The output shows impact.com’s risk assessment for the domain you enter and does not include performance or partner-specific metrics.

Access the report

  1. From the left navigation menu, select [Protect] → Event Risk.

  2. On the report page, set your filters at the top, then select Apply.

  3. Use the icons at the top-right to pin, schedule, or download the report (PDF, Excel, or CSV).

For details on the filters and columns, see the Filter reference and Reputation triggers reference below.

Filter reference

Use these filters to control the scope of data returned:

Filter
Description

Date Range

Select start and end dates to view the domain’s risk signals for that period. Daily reputation is evaluated; multiple days can be queried.

Domain risk is reevaluated daily, but only one row will be present in the report and will show the most recent evaluation for the date range if the evaluations are the same.

Domain

Enter the referral domain you want to assess (e.g. starkindustries.com). This filter is required to run the report. If visited via drilldown from one of the other reports, the domain will be auto-populated. If adding directly, remove the scheme (https:// and subdomain e.g. www.)

Reputation triggers reference

These columns explain why the entered domain has been flagged by Event Risk’s reputation system. Multiple triggers can be true at the same time for a single domain.

Column
Description
Risk level

Domain

The referral domain you queried.

Last Scored Date

The last date on which the domain was flagged for an Event Risk score.

Malware

This indicates when the domain is associated with malware distribution or compromise. Typically considered high or critical severity. This domain has been associated with malware, which could be involved in deploying cookie-stuffing scripts or other illicit behavior.

CRITICAL

i.e. if we see this signal, we will filter these clicks out from reporting and attribution.

Single Source Traffic

This indicates when traffic originates disproportionately from a single source, indicating potential manipulation or inorganic patterns.

SUSPECT

Ad Spamming

This indicates when the domain exhibits spammy advertising behaviors (for example, excessive ad calls or stacked placements).

SUSPECT

Copyright Risk

This indicates when the domain shows content or distribution patterns associated with copyright infringement risk. Google has delisted URLs for copyright infringement. Any partner stealing content from another site for gain is against our Terms thus clicks from this signal will be disregarded as illegitimate.

CRITICAL

i.e. if we see this signal, we will filter these clicks out from reporting and attribution.

Low Engagement

This indicates that users spend very little time on the partner’s website and bounce more frequently than normal. This is a common sign of bot behavior.

SUSPECT

Abnormal Traffic

Indicates when anomalous traffic patterns are detected (for example, irregular spikes, bot-like cadence). This looks for a large concentration of traffic in a small number of IPs.

SUSPECT

Adult Content

Indicates when content is for a mature audience and not safe for work or minors.

SUSPECT

Last updated

Was this helpful?